Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/bdc5499c-3d3a-3c25-a5b3-4eba476be187.roa
File:                     bdc5499c-3d3a-3c25-a5b3-4eba476be187.roa (raw, json)
Hash identifier:          8eXFDSrAPF+73KZPui8ePuXDfxVmO3BIDSulpphbyG4=
Subject key identifier:   FD:A7:17:C5:16:C8:A5:D8:6F:F3:43:C6:B5:ED:1B:55:0F:5C:C9:6A
Certificate issuer:       /CN=355b6459-d3e6-4569-b278-aef1a714f5bf
Certificate serial:       010D0C9F43285848B1F62A83AD5537A0A611CC00
Authority key identifier: CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/bdc5499c-3d3a-3c25-a5b3-4eba476be187.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     19108
IP address blocks:        204.63.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:2a:83:ad:55:37:a0:a6:11:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355b6459-d3e6-4569-b278-aef1a714f5bf
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=cc146fe0-cd46-4abe-a63a-c37c458b6078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b7:08:0e:d6:6f:ee:fd:c1:8c:06:1d:3b:4b:
                    4a:9d:01:c9:11:27:5f:ae:cb:39:38:96:a6:62:d9:
                    08:ce:bf:5d:58:4d:e7:bf:ce:89:0b:7c:87:17:23:
                    5f:a5:12:18:dd:50:19:e1:57:51:1a:42:a7:2b:d8:
                    c0:35:0c:41:81:ed:a5:4f:45:61:1d:3d:ba:39:aa:
                    7c:fd:91:9a:b7:29:eb:d7:98:16:e1:aa:50:6c:07:
                    e5:5f:1c:58:84:09:8d:36:59:8d:56:d2:85:6f:c6:
                    20:7d:bf:80:f8:27:d0:2c:fe:f7:a6:38:1f:19:d3:
                    37:4a:93:c3:97:34:8e:97:4f:3c:c2:51:3b:ed:bd:
                    22:00:14:d0:40:76:5b:b0:53:53:c2:a0:70:33:d8:
                    76:d1:48:55:aa:b1:ae:de:87:fd:05:2d:c6:28:3c:
                    6b:98:33:5c:ab:75:4a:6c:54:bc:37:96:8b:67:01:
                    f2:fb:13:fa:e8:29:42:3c:47:90:8a:33:6e:f5:4d:
                    5f:2f:b5:81:cd:0c:b7:37:33:1c:0b:cd:1b:33:d1:
                    ef:35:5c:f3:f2:da:61:9b:e1:71:23:3c:e1:a2:f9:
                    4a:ef:ec:3f:7b:61:1d:33:f5:c4:3f:0d:e6:00:df:
                    8c:fe:16:2c:42:eb:bb:32:cf:6d:55:6d:be:94:53:
                    d7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A7:17:C5:16:C8:A5:D8:6F:F3:43:C6:B5:ED:1B:55:0F:5C:C9:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/bdc5499c-3d3a-3c25-a5b3-4eba476be187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl

            X509v3 Authority Key Identifier:
                keyid:CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:45:b0:1c:80:4a:66:66:23:34:d1:41:2d:da:14:af:33:92:
         98:3c:23:56:33:8c:66:22:44:a0:5c:f0:8b:ce:c6:fd:82:43:
         8c:d1:02:e7:6f:66:5d:8c:a4:80:98:f3:c8:c6:57:2d:e7:6b:
         1c:d1:93:51:98:21:d6:7f:7d:2e:93:81:6e:2d:b7:a1:0a:af:
         29:d5:9d:7e:4c:e3:35:37:e7:93:dc:65:c7:22:56:70:48:5f:
         f0:49:de:0e:0e:5f:4b:83:47:e9:b9:5c:ed:f0:37:d1:2c:a0:
         76:a8:2b:6f:4c:3c:d4:e1:ea:37:c4:1a:79:62:62:7f:6b:4b:
         0d:31:12:c9:3b:1a:bd:8c:87:bd:49:ed:72:3e:b4:35:d0:be:
         a3:c4:74:a8:be:cd:ee:a7:a4:de:78:90:e5:fb:a8:9b:ea:15:
         21:d0:27:0b:54:7a:a4:01:a7:fd:61:69:f6:e2:35:33:9d:36:
         be:ab:7d:34:ca:1a:1e:ff:89:25:3a:e6:e6:73:e3:d8:dc:2d:
         ad:a4:9d:e5:d7:5d:ef:d9:99:58:4f:b4:07:15:38:de:0f:4f:
         e6:05:57:80:e8:46:d2:f2:5b:b1:dd:2d:2e:ff:c3:55:ce:92:
         02:09:e2:ee:10:36:e3:a6:07:28:22:84:eb:72:22:68:e2:7c:
         e4:88:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:43 2025 by rpki-client